Static task
static1
Behavioral task
behavioral1
Sample
72c8225259262f0e96dd9081cc425d46eb169cf265b06cccf30e670fd1d4c630.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
72c8225259262f0e96dd9081cc425d46eb169cf265b06cccf30e670fd1d4c630.exe
Resource
win10v2004-20240412-en
General
-
Target
72c8225259262f0e96dd9081cc425d46eb169cf265b06cccf30e670fd1d4c630
-
Size
127KB
-
MD5
4af83684dd231c6af10df99161731e4d
-
SHA1
baacee73436aa1dc98cf10fea2674e889d0271b1
-
SHA256
72c8225259262f0e96dd9081cc425d46eb169cf265b06cccf30e670fd1d4c630
-
SHA512
8f5cd310fc75922706ed2cd06ef1c0efe7d5d79225012d2de45b5c2acae91dd477bf02840a53c75a5769d8ddc8cf4b10e44cb33487b8ba428d47a1c604214058
-
SSDEEP
3072:UOjWuyt0ZHqsXOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3rnXLHf7zjPPL:UIH9OKofHfHTXQLzgvnzHPowYbvrjD/O
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72c8225259262f0e96dd9081cc425d46eb169cf265b06cccf30e670fd1d4c630
Files
-
72c8225259262f0e96dd9081cc425d46eb169cf265b06cccf30e670fd1d4c630.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
v302nymd Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1k83htzz Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1136yzwc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE